cybersecurity program manager - posture, hygiene and ai (remote)

ai analyst

coding specialist ii

cybersecurity program manager - posture, hygiene and ai (remote) Jobs in Chicago

dev secops engineer ii (cloud security) Jobs in Chicago

dev secops engineer ii (cloud security)

director, cybersecurity

cyber security analyst ii

RKON

<div>
 <strong>
  About us:
 </strong>
 RKON is an ISO 27001 and AICPA SOC 2 Type II certified company that specializes in providing IT migration and transformation services for the mergers and acquisition market. RKON is looking for ambitious professionals to join our award-winning team. We have a proven track record for finding and developing top talent with people that believe they can achieve something greater. We also pride ourselves on fostering an environment where initiative, creative thinking, and collaboration are encouraged and rewarded&mdash;a key reason for the extraordinary level of service we deliver to our customers.
 <br/>
 <br/>
 <strong>
  About the position:
 </strong>
 RKON is seeking a Cyber Security Analyst to work on the client-facing Security Operations Center (SOC) &ndash; Assurance and Response Team. This position requires a motivated fast learner, who is able to work within key vulnerability and security information event management functions to identify, analyze, and remediate potential threats to the environment. The candidate will require security industry knowledge that evolves with current and emerging vulnerabilities and threats, as well as an ongoing understanding of key business and technological processes. This position will report to the SOC Lead Security Analyst.
 <br/>
 <br/>
 In this role you will perform key client-facing managed security services activities including identification of assets, scanning for infrastructure and application vulnerabilities, and security monitoring. In addition, you will perform investigations and conduct analyses of events in order to thwart internal and external threats to the environment. You will collaborate on an ongoing basis with clients&rsquo; key contacts and stakeholders to support detection, triage, incident analysis, containment, remediation, and reporting of vulnerabilities, events, and escalated incidents while coordinating business priorities, emerging and actual threats, and best practices to ensure confidentiality, integrity, and availability of the client&rsquo;s information assets.
 <br/>
 <br/>
 <strong>
  You will be responsible for the following:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Assist in establishing a mature and optimized Security Operations Center discipline to support managed security services focused on client-facing vulnerability and security information event management engagements.
  </li>
  <li>
   Perform threat hunts that target known vulnerabilities, threats, and other attack vectors.
  </li>
  <li>
   Assist in security console tuning.
  </li>
  <li>
   Assist in development and knowledge sharing within the team.
  </li>
  <li>
   Act as an internal information security consultant to the business and technology units, advising on risks, threats, and control practices related to SOC - Assurance and Response.
  </li>
  <li>
   Conduct operations surrounding cyber security incident response technologies including network logging and forensics, security information and event management tools, security analytics platforms, log search technologies, and host-based forensics as applicable.
  </li>
  <li>
   Collaborate and serve as liaison to key security vendor solution partners.
  </li>
  <li>
   Collaborate with RKON and client technical leads and Subject Matter Experts including Engineering, Operations, Service Desk, Applications, and client key stakeholders on matters related to security scanning and monitoring across a global footprint.
  </li>
  <li>
   Detect, respond, mitigate, and report on cyber threats/incidents that may impact the environment.
  </li>
  <li>
   Utilize analytics to identify potential vulnerabilities and threats to the environment.
  </li>
  <li>
   Participate in security incidents and act as the technical Subject Matter Expert during significant security incidents.
  </li>
  <li>
   Conduct scanning and monitoring activities to provide in depth visibility into potential known and unknown vulnerabilities and threats that may pose risk to the RKON and client environments.
  </li>
  <li>
   Resolve problems independently and understand escalation procedures.
  </li>
  <li>
   Adhere to RKON company and client policies, procedures, and security practices.
  </li>
  <li>
   Document actions in cases to effectively communicate information to internal and external stakeholders as well as for historical retrieval.
  </li>
  <li>
   Respond to clients in a timely manner (within documented SLA) with thorough and concise analysis and recommended actions.
  </li>
  <li>
   Analyze and respond to security threats from Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Email Security, Cloud Security, and other security threat data sources.
  </li>
  <li>
   Identify and remediate infrastructure and application vulnerabilities identified in continuous scanning exercises and assist with risk prioritization.
   <br/>
   <br/>
  </li>
 </ul>
 Required Technical and Professional Expertise
 <br/>
 <br/>
 <ul>
  <li>
   Endpoint Protection Experience Required
  </li>
  <li>
   Industry related certifications: Security+, CEH, GSEC, etc.
  </li>
  <li>
   Strong interpersonal and organizational skills
  </li>
  <li>
   Strong business acumen including written and verbal communication skills
  </li>
  <li>
   Critical thinking and problem-solving skills
  </li>
  <li>
   Desire to work in SOC, Vulnerability Management, Security Information Event Management, Threat Hunt, or Threat Intel team on a long-term basis
  </li>
  <li>
   Experience with Microsoft Sentinel, Splunk or other industry-leading Security Information Event Management technologies
  </li>
  <li>
   Experience with Vulnerability Management technologies
  </li>
  <li>
   Experience with Microsoft Defender for Endpoint and other Defender Suites, CrowdStrike, Sentinel One, or other industry-leading Endpoint Protection Platforms
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Technical And Professional Expertise
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   2+ years&rsquo; experience in Security Operations (e.g. SOC, Forensics, Cloud Security, Network Security, Threat Hunting, etc.)
  </li>
  <li>
   Microsoft SC-100, SC-200, AZ-500
  </li>
  <li>
   Experience with Cloud Security configuration best practices
  </li>
  <li>
   Experience with scripting and automation (e.g. python, powershell, etc)
  </li>
  <li>
   Working knowledge of HIPAA, PCI-DSS, and NIST frameworks
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Compensation:
 </strong>
 Compensation includes a base plus bonus structure. This position is eligible for a bonus component that would be dependent on pre-defined performance factors. As part of our total compensation package, RKON provides a benefits package that includes health insurance (medical, dental, vision, life, and long and short-term disability insurance); flexible time off; and a 401(k) Plan with employer match to qualifying employees. All compensation determinations are based on the skills and experience required for the position and commensurate with experience of selected individuals, which may vary above and below the stated amounts.
 <br/>
 <br/>
 <strong>
  RKON does not accept unsolicited resumes from staffing agencies, search firms or any third parties.
 </strong>
</div>


Cyber Security Analyst II

United Airlines

<div>Achieving our goals starts with supporting yours. Grow your career, access top-tier health and wellness benefits, build lasting connections with your team and our customers, and travel the world using our extensive route network.<br>
<br>
Come join us to create what&rsquo;s next. Let&rsquo;s define tomorrow, together.<br>
<h2 class="jobSectionHeader"><b>
Description</b></h2><p>
Connecting People. Uniting the World. There&rsquo;s never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world &mdash; with millions of customers and tens of thousands of employees &mdash; we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly.</p><p>
We&rsquo;re on a path to becoming the best airline in aviation history. Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities, and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business. We help drive progress and growth through trusted digital solutions, safeguarding assets and empowering our team, all while promoting a cyber-safe and secure environment that supports resilient airline operations.</p><p>
United offers a competitive benefits package aimed at keeping you happy, healthy, and well-traveled. From employee-run &quot;Business Resource Group&quot; communities to world-class benefits like parental leave, 401(k), and privileges like space-available travel, United is truly a one-of-a-kind place to work. Are you ready to travel the world and help us keep our airline cyber safe? Apply today!</p><p><b><br>
Job overview and responsibilities</b></p><ul><li>
Leads the collection, analysis, assessment, and dissemination of open source, and classified information regarding cyber threats and potential attacks within the scope of the United Airlines Cyber Intelligence program</li><li>
This role works with internal business partners and external industry colleagues to identify threats to United and formulate risk assessments, priority intelligence, threat intelligence reports and requests for intelligence information to drive cyber-safe solutions and reduced the cyber-attack surface</li><li>
Prioritize and analyze cybersecurity threats and vulnerabilities to ensure rapid detection, response and remediation to evolving threat actor tactics, techniques and procedures</li><li>
Define and develop processes and tools to track cyber threat intelligence analysis, detection, reporting, documenting, and threat actor profiles</li><li>
Consult with outside parties such as U.S. Government agencies, third-party vendors, and experts to identify and prioritize threats and protections needed</li><li>
Evaluate and recommend strategic changes to improve the collection, maintenance, and utilization of threat intelligence indicators for threat detection engineering enhancements</li><li>
Engage, collaborate and partner with leadership, key collaborators and broader security team on key initiatives to drive day-to-day security operations</li><li>
Act as a trusted advisor to internal and external partners (division leadership, peers, employees)<br>
</li></ul><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><div><h3 class="jobSectionHeader"><b>
What&rsquo;s needed to succeed (Minimum Qualifications):</b></h3><br>
<div></div><ul><li>
Bachelor's degree or 4 years of relevant work experience in Computer Science or other STEM field</li><li>
3+ years of related experience</li><li>
Proficient with cybersecurity tools for areas such as network topologies, intrusion detection, incident response</li><li>
In-depth knowledge of the intelligence cycle</li><li>
Proficient at interpreting and applying finished and raw intelligence</li><li>
Skill in communicating with all levels of management (e.g., interpersonal skills, approachability, effective listening skills, appropriate use of style and language for the audience)</li><li>
Ability to perform in a dynamic environment to strict deadlines, with the ability to address multiple activities concurrently</li><li>
Skills to drive cross-functional initiatives to completion, preferably in complex business environments</li><li>
Ability to communicate in a manner which is understandable by non-technical audiences</li><li>
Ability to achieve objectives by contributing information and recommendations to strategic plans, identifying trends and driving change</li><li>
Must be legally authorized to work in the United States for any employer without sponsorship</li><li>
Successful completion of interview required to meet job qualification</li><li>
Reliable, punctual attendance is an essential function of the position</li></ul><p></p><h3 class="jobSectionHeader"><b><br>
What will help you propel from the pack (Preferred Qualifications):</b></h3><br>
<p></p><ul><li>
Bachelor's degree or 4 years of relevant work experience in Intelligence or Cybersecurity</li><li>
CISSP, GCTI, CCIP, Security+</li><li>
6+ years of related experience in the aviation industry or government</li><li>
Comfortable with scripting or programming languages (C/Python/Ruby/JavaScript)</li><li>
Hands-on experience with processing and analyzing cyber threat intelligence for a large organization</li></ul><p></p><p><br>
Job Posting Expires 4/18/2026</p></div><br>
The base pay range for this role is $112,480.00 to $146,540.00.<br>
The base salary range/hourly rate listed is dependent on job-related, factors such as experience, education, and skills. This position is also eligible for bonus and/or long-term incentive compensation awards.<br>
<br>
You may be eligible for the following competitive benefits: medical, dental, vision, life, accident &amp; disability, parental leave, employee assistance program, commuter, paid holidays, paid time off, 401(k) and flight privileges.<br>
<br>
United Airlines is an Equal Opportunity Employer. We recruit, employ, train, compensate, and promote without regard to race, color, religion, national origin, gender identity, sexual orientation, disability, age, veteran status, or any other protected category under applicable law. We provide reasonable accommodations for applicants and employees with disabilities. To request an accommodation, contact JobAccommodations@united.com</div>

Senior Analyst - Cyber Threat Intel (Remote)

AbbVie

<div><b>Company Description</b><p><b><br>
About AbbVie</b></p><p>
AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.</p><b><br>
Job Description</b><p><br>
As artificial intelligence (AI) capabilities rapidly expand across the enterprise, this role will also be responsible for incorporating AI usage, governance, and misuse detection into the overall security posture and hygiene strategy. This includes addressing both intentional and unintentional misuse of AI technologies, ensuring that AI-enabled tools, platforms, and workflows are used in accordance with enterprise policies, data protection standards, and ethical guidelines, while minimizing emerging security, privacy, and compliance risks.</p><p>
Along with ensuring AI ethical guidelines, the Associate Director, AI Security Posture and Hygiene, plays a pivotal leadership role within our organization, steering the strategic direction, design, and implementation of our security posture and hygiene program. This role is at the forefront of enhancing our cybersecurity measures across a diverse and complex infrastructure landscape, including on-premise and cloud models.</p><p>
By continuously monitoring and remediating security control gaps and leveraging the<b> Center for Internet Security (CIS) Top 18 critical security controls</b>, this position aims to bolster our defenses by improving our hygiene of cybersecurity standards and practices.</p><p><b>
This position can be based anywhere remotely/virtually anywhere in the U.S.</b></p><p><b>
In this role, you will be responsible for:</b></p><ul><li><b>
Establish a comprehensive mature security posture and hygiene strategy for artificial intelligence and machine learning technologies, including generative AI, across enterprise environments (on‑premise and cloud).</b></li><li>
Assemble and manage a team dedicated to implementing, assessing, and maturing the CIS Top 18 critical controls and their associated safeguards.</li><li>
Develop and execute strategies for continuous monitoring and improvement of security controls and configurations across enterprise systems.</li><li>
Ensure the hygiene of security configurations by establishing and enforcing policies, procedures, and standards to prevent unauthorized access, data breaches, and other cyber threats.</li><li>
Collaborate with IT, network, and other relevant departments to align security measures with organizational goals and compliance requirements.</li><li>
Develop and maintain comprehensive documentation on security controls, assessments, incidents, and improvements.</li><li>
Conduct regular assessments to determine the maturity of each security control, identifying areas for improvement and recommending enhancements.</li><li>
Foster strong partnerships with technology and domain stakeholders to ensure seamless integration and compliance of security practices across the enterprise.</li><li>
Stay abreast of the latest cybersecurity trends, threats, and technologies to adapt and evolve our security strategies accordingly.</li><li>
Lead initiatives to educate and train team members and the wider organization on cybersecurity good practices and the importance of a forward-thinking security posture.</li><li>
Ensure that all security programs and initiatives adhere to relevant laws, regulations, and policies, continuously updating practices to meet new standards.</li><li>
Oversee daily operations, including targeted assessments, risk management, and response strategies, ensuring a high level of security and resilience against cyber threats.</li><li>
Build collaborative relationships and partner effectively with business and technology senior leaders.</li><li>
Maintain expert-level professional and technical knowledge in relevant domains</li><li>
Building metrics and dashboards that will provide stakeholders with actionable insights into the security posture of technologies</li></ul><br>
<b>
Qualifications</b><br>
<ul><li>
Bachelors Degree and 9 years of experience OR Masters Degree and 8 years of experience OR PhD and 4 years of experience</li><li>
Proven leadership in cybersecurity, with extensive experience in managing security posture and hygiene strategies within complex and diverse IT environments</li><li><b>
Experience implementing an AI security program across an enterprise.</b></li><li>
Expert knowledge of operating systems, networking protocols, systems administration, X as a service, applications, and security technologies.</li><li>
Expert knowledge and application of cybersecurity terminology, concepts, and the cyber threat landscape and attack vectors.</li><li>
Deep understanding of risk management principles and the ability to integrate these into security practices.</li><li><b>
Experience with the CIS Top 18 controls and familiarity with the CIS Controls Implementation Groups (IGs) methodology.</b></li><li>
Demonstrated ability to innovate and adapt in response to a constantly changing environment.</li><li>
Advanced critical thinking, problem solving, and analytical skills</li><li>
Strong leadership and collaboration skills with business and technical groups.</li><li>
Excellent written and verbal communication and listening skills, with the ability to effectively convey technical insights to technical and non-technical stakeholders.</li><li>
Demonstrated ability to interface effectively with clients, IT management, and staff.</li><li>
A sincere desire to learn, grow, and go beyond personal capabilities, staying abreast of the latest developments in the cybersecurity landscape .</li><li>
Professional cybersecurity certifications (e.g., CISSP, CISM, CIS Controls, etc.) are highly desirable.</li></ul><br>
<b>
Additional Information</b><p><br>
Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:
</p><ul><li><p>The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
</p></li><li><p>We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
</p></li><li><p>This job is eligible to participate in our short-term incentive programs.
</p></li></ul><p>Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company&rsquo;s sole and absolute discretion, consistent with applicable law.</p><div></div><p>
AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.</p><p>
US &amp; Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html</p><p>
US &amp; Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:</p><p>
https://www.abbvie.com/join-us/reasonable-accommodations.html</p></div>

Cybersecurity Program Manager - Posture, Hygiene and AI (Remote)

Blue Star Partners LLC

<div><p><b>Job Title:</b><b> </b><b>Security Project Manager &ndash; Government &amp; Insurance</b><br>
<b>Location: </b>Chicago, IL<br>
<b>Work Model:</b> Hybrid (Possibility of travel to NW Indiana and/or Wisconsin)<br>
<b>Rate: </b>$65-$75<br>
<b>Contract Length: </b>6 months (Strong Possibility of Extension)<br>
<b>Employment Type:</b> 1099</p><br>
<p><b>
1. Job Summary</b>
</p><p>The Security Project Manager is responsible for leading the planning, execution, and successful delivery of security-focused initiatives within government and insurance environments. This role ensures projects are delivered on time, within scope, and in compliance with applicable regulatory frameworks, while effectively managing risk and protecting sensitive data, systems, and infrastructure.<br>
</p><p><b>2. Key Responsibilities</b>
</p><ul><li>Lead the full security project lifecycle, from initiation and planning through execution, monitoring, and closure
</li><li>Manage multiple concurrent security projects across cyber and physical security domains
</li><li>Coordinate cross-functional teams, third-party vendors, and client stakeholders to ensure alignment and delivery
</li><li>Ensure compliance with government regulations (e.g., FISMA, FedRAMP, CJIS) and insurance industry standards (e.g., NAIC, PCI DSS, HIPAA, where applicable)
</li><li>Develop and maintain detailed project plans, schedules, budgets, and resource forecasts
</li><li>Identify, assess, and manage project risks; implement mitigation strategies and track remediation efforts
</li><li>Oversee the implementation of security controls, technologies, and remediation initiatives
</li><li>Support incident response planning, tabletop exercises, and post-incident reviews
</li>Prepare and present project status reports, risk summaries, and executive-level briefings to senior leadership<br>
<li>
</li></ul><p><b>3. Required Skills &amp; Competencies</b>
</p><ul><li><b>Security &amp; Technical Knowledge:</b> Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, and security controls related to data protection, identity and access management, and infrastructure security
</li><li><b>Regulatory &amp; Compliance Expertise:</b> Experience working within regulated environments, including government and/or insurance sectors, with knowledge of FISMA, CJIS, NAIC, PCI DSS, and HIPAA
</li><li><b>Project Management:</b> Strong experience managing projects using Agile, Waterfall, or hybrid methodologies; ability to manage scope, schedule, cost, and quality
</li><li><b>Risk Management:</b> Experience conducting risk assessments, supporting threat modeling, vulnerability management, and disaster recovery planning
</li><li><b>Communication &amp; Leadership:</b> Excellent written and verbal communication skills with the ability to translate technical concepts for non-technical audiences
</li><li><b>Stakeholder Management:</b> Proven ability to work effectively within complex, matrixed organizations and navigate politically sensitive environments<br>
</li></ul><p><b>4. Qualifications</b>
</p><ul><li>Bachelor&rsquo;s degree in Information Security, Computer Science, Information Systems, or a related field (Master&rsquo;s degree preferred)
</li><li><b>5&ndash;7 years of experience</b> in security project management, with demonstrated experience supporting government and/or insurance clients
</li><li>Professional certifications preferred, such as PMP, CISSP, CISM, or equivalent
</li>Experience working in compliance-driven or highly regulated environments required<br>
<li>
</li></ul><p><b>5. Work Environment &amp; Conditions</b>
</p><ul><li>Hybrid or on-site work model, depending on client and project requirements
</li><li>Ability to obtain and maintain a security clearance may be required for government engagements
</li><li>Occasional travel to client, agency, or project sites</li></ul></div><p></p>

Security Project Manager – Government & Insurance (Contract)

Endeavor Health

<div><div>Hourly Pay Range:</div>
$31.28 - $48.48 - The hourly pay rate offered is determined by a candidate's expertise and years of experience, among other factors.<div></div><div>
Position Highlights:</div><ul><li>
Position: End Using Computing Technician II</li><li>
Location: Swedish Hospital Chicago</li><li>
Full Time</li><li>
Hours: Monday-Friday, 8am-430pm</li><li>
Hybrid</li><li>
Travel: Local travel between sites will be required for this role. Capable of travel 24 / 7 when on call</li></ul><div><br>
A Brief Overview:</div><div>
The End User Computing II provides onsite technical support for all hardware platforms in use at Endeavor including desktops, laptops, printers, smart phones, other mobile devices, and peripherals that support clinical and business workflows</div><div></div><div>
The Analyst partners with the Applications, Network, Clinical Informatics, Nursing Informatics, and other teams to provide high level troubleshooting and collaboration. The Analyst works issues escalated by Service Desk Analysts, Service Desk leadership, and End User Computing II. This individual enables all Endeavor Health (Endeavor) team members to work effectively across desktops, laptops, mobile devices, and virtual environments by ensuring a secure, reliable, and consistent end user technology experience.</div><div></div><div>
The incumbent maintains accurate records in incident management and inventory systems, requiring strong problem-solving skills and a degree of creativity. As a customer-facing role, maintains a high degree of professionalism and regularly engages with customers; they should be seen as trusted partners. The role is a liaison between customers and the broader IT organization. In this capacity, is present and engaged with their customers by proactively rounding, attending safety huddles as needed, remaining apprised of current activity at the customer site, etc. This role also actively participates and assists in leading large scale hardware deployment activities.</div><div></div><div>
The incumbent collaborates with other IT team members and customers to continually improve the digital workplace environment. Possessing a strong understanding of ITIL terminology and the healthcare environment is a plus. To be successful in this role, you will be expected to remain current on the latest solutions and technologies and remain wellinformed of customer concerns and needs. This role requires a balance of strong technical skills, particularly as it relates to triaging technical issues, and strong interpersonal skills to serve as the face of IT to our customers. This level is expected to have very strong technical skills and be able to form strong relationships with our customers. Customers should seek out the incumbent as a trusted partner and technical resource. They should also serve as mentors to those in the level I.<br>
<br>
What you will do:</div><ul><li>
Owns the entire device lifecycle management process from deployment to support, replacement, and retirement. Works independently, serves as an escalation point for level I, and leads small initiatives. Manages process consistent with industry best practice terminology (e.g., ITIL), Endeavor specific requirements, and sound professional judgment.</li><li>
Analyzes, prioritizes, responds, and resolves service requests in a timely manner, and according to Service Level Agreements (SLAs) and established IT support procedures. Resolves incoming service requests with the assistance of Endeavor systems, IT Support manuals, other Endeavor staff, Endeavor vendors, and uses troubleshooting and analytical skills to diagnose, test, and repair. Ensures IT environment is working optimally and meeting customer needs. Proactively reports any gaps in environment performance or lack of meeting customer needs and begins resolving as appropriate.</li><li>
Maintains ownership of all assigned service requests until they are resolved or escalated to the appropriate Endeavor staff or Endeavor vendor for resolution; escalates service requests appropriately according to IT support standards. Promptly updates ServiceNow on progress on assigned service requests. Effectively communicates status with customers and properly documents the status according to Endeavor documentation procedures. Utilizes knowledge gained by engaging with customers through rounding, attending safety huddles, ad hoc conversations, etc. to anticipate needs and proactively addresses.</li><li>
Provides desktop hardware and software support, including but not limited to: Moves, Adds or Changes (MAC), installation, deployment, implementation, swap out, updating, configuration, and re-configuration of equipment. Performs advanced troubleshooting and may specialize in certain technologies.</li><li>
Delivers high quality customer service as both a technical resource and a liaison to the IT organization.</li><li>
Supports projects such as construction, system implementations, upgrades, maintenance, and retirements. Completes assigned tasks within project timelines</li><li>
Serves as a supportive team member and takes on call per posted schedule. Mentors Associate Analysts and coordinates small groups.</li><li>
Other duties as assigned.</li></ul><div>
What you will need:</div><ul><li>
Associates Degree</li><li>
Five (5) or more years of experience in a technology role or customer service support role</li><li>
Excellent verbal and written skills essential for providing positive customer service and good communication.</li><li>
Strong customer service skills with the ability to manage challenging customers and situations professionally and courteously.</li><li>
Ability to apply common sense understanding to carry out written or oral instructions.</li><li>
Ability to read, write, and comprehend detailed instructions, short correspondence, and memos.</li><li>
Personal and ethical accountability</li><li>
Demonstrates analytical and critical thinking for problem solving and issue resolution.</li><li>
A lean towards curiosity, out of the box thinking, and innovative solution development.</li><li>
A valid driver&rsquo;s license is required if the incumbent is selected to perform related duties at an off-site location.</li><li>
If the incumbent uses their personal vehicle, the incumbent must maintain automobile liability coverage as required by law and evidence of such coverage may be requested.</li></ul><div></div><div>
Benefits:</div><ul><li>
Career Pathways to Promote Professional Growth and Development</li><li>
Various Medical, Dental, and Vision options</li><li>
Tuition Reimbursement</li><li>
Free Parking at designated locations</li><li>
Wellness Program Savings Plan</li><li>
Health Savings Account Options</li><li>
Retirement Options with Company Match</li><li>
Paid Time Off</li><li>
Community Involvement Opportunities</li></ul></div><div></div>

End User Computing Technician II

Sargent & Lundy

<div>Description:
<div>
Sargent &amp; Lundy is a leading consulting engineering firm specializing in the power and energy sectors. Since 1891, we have provided comprehensive engineering, design, and consulting services for both traditional and renewable power generation, grid modernization, nuclear power, and beyond. Our mission is to help clients achieve their energy goals effectively by leveraging advanced technologies and adopting sustainable practices.</div><h4 class="jobSectionHeader"><b>
Role Overview</b></h4><div>
Sargent &amp; Lundy is seeking a proactive, data-driven, and detail-oriented Senior GRC Analyst to lead key pillars of Governance, Risk, and Compliance (GRC) with a primary emphasis on enterprise Information Security, TPRM, contract governance, and cross-functional coordination with Legal and Procurement. You will own cyber training, communications, and phishing simulations, and drive measurable outcomes through strong data analysis and dashboard reporting (KPIs/KRIs). You will support audit readiness and regulatory alignment across frameworks such as ISO 27001, SOC 2, NIST CSF/171, and CMMC. You will also guide privacy-aligned practices (e.g., GDPR) and lead effective policy implementation through clear procedures, controls, and adoption plans.</div><p><b>
Essential Responsibilities</b></p><ul><li>
Lead and mature the Third-Party Risk Management (TPRM) program: Develop &amp; manage vendors inventory, conduct risk reviews of third-party vendors, define tiering/scoping, evaluate controls, track obligations/findings through closure, and standardize evidence retention in collaboration with Legal and Procurement.</li><li>
Drive strong contract management with Legal and Procurement: Standardize security and privacy clauses, review S&amp;L client contracts, negotiate requirements, and ensure obligations are tracked, owned, and reported.</li><li>
Own the security awareness &amp; training program end-to-end: Develop curriculum, coordinate communications, execute phishing simulations, analyze outcomes, and improve effectiveness using KPI/KRI dashboards and trend reporting.</li><li>
Administer and optimize GRC platforms and workflows (e.g., Hyperproof) to maintain visibility into risks, assessments, findings, and audit deliverables; establish SLAs and performance indicators.</li><li>
Develop risk management &amp; risk assessment practice, conduct risk assessments, develop and manage risk register with clear tracking of risks and accountability.</li><li>
Advance security governance by drafting, maintaining, and operationalizing policies, standards, procedures, and roles &amp; responsibilities; lead change management and communications to ensure policy implementation and adoption.</li><li>
Coordinate evidence and execute control readiness for ISO 27001, SOC 2, NIST CSF, CMMC (gap analysis, control testing, POA&amp;Ms), and support automation that reduces workload.</li><li>
Support privacy-aligned practices (e.g., GDPR): contribute to data classification/handling standards, data mapping/records of processing, privacy-by-design reviews, incident/breach alignment, and retention practices.</li><li>
Oversee governance for Business Continuity and Disaster Recovery and Backup &amp; Recovery in partnership with IT (plan maintenance, exercises, lessons learned, reporting).</li><li>
Lead cross-functional coordination with IT, HR, Finance, Legal, and business teams to embed compliance into operations and accelerate remediation of findings.</li><li>
 Manage security tasks/projects and report progress via standardized dashboards, scorecards, and executive-ready narratives, highlighting risk, performance, and trends. - Define, publish, and automate metrics &amp; management reporting (KPIs/KRIs) for training effectiveness, phishing trends, vendor risk, audit readiness, privacy/policy adoption, and control performance.</li><li>
Continuously upgrade information security skills, contribute to Information Security team skill development with playbooks, enablement sessions, and knowledge-sharing.</li><li>
 Support government contract compliance reviews and tracking, ensuring obligations are documented, monitored, and evidenced.</li></ul><div></div><div><b><br>
Core Areas of Responsibility (Scope)</b></div><br>
<div></div><ul><li>
 Information Security Governance, Policies, Standards, Procedures, and Roles &amp; Responsibilities.</li><li>
 Risk Management &ndash; Information security risk management and risk assessments</li><li>
Compliance management &ndash; Audit evidence management, audit coordination and compliance monitoring</li><li>
Third Party Risk Management - Third Party Risk Management, Vendor Assessments, Client Contract Reviews and obligation management.</li><li>
Security Awareness &amp; Training &mdash; including communications and phishing simulations: Hoxhunt and Mimecast</li><li>
 Coordination with IT, HR, Finance, Legal, and Business Teams. - Security Tasks/Projects Management.</li><li>
Metrics &amp; Management Reporting &mdash; strong emphasis on data analysis and dashboarding. Information Security Team Skill Development.</li><li>
Government Contract Compliance Reviews and Tracking.</li><li>
Deep Knowledge of Governance &amp; Privacy</li><li>
Policy lifecycle management and control mapping; demonstrated ability to translate policy into procedures/controls and drive organization-wide policy implementation and adoption.</li><li>
Privacy principles and GDPR-aligned practices (e.g., data classification/handling, data mapping/records of processing, privacy by design, incident/breach communications aligned to policy).</li><li>
 Compliance standards and frameworks (ISO 27001, NIST CSF, SOC 2, CMMC).</li><li>
 Third-party risk, software intake governance, audit readiness, and evidence management.</li><li>
Security &amp; TPRM Tools - TPRM platforms: ProcessUnity (Vendor Risk, Contract/Obligations, Issues/Findings tracking). - TPRM intelligence/workflow: OneTrust, BitSight (as applicable).</li><li>
GRC/risk registers: Hyperproof (risk, controls, evidence, audits). - Data analytics and reporting: Power BI and Excel (for KPI/KRI dashboards and executive reporting).</li><li>
Business Continuity and Disaster Recovery Process Oversight. - Backup &amp; Recovery Process Oversight.</li><li>
Mentoring, cross functional team collaboration and executive reporting</li></ul><div></div><p><b><br>
This position offers the flexibility of a hybrid schedule with the expectation of 3 days per week in our downtown Chicago office, and 2 days remote from home.</b></p>
Qualifications:
<h1 class="jobSectionHeader"><b>Required Qualifications</b></h1><ul><li>
 Bachelor&rsquo;s degree in computer science, information systems, or related field; or equivalent professional experience.</li><li>
5+ years in GRC or related domains, including leadership/ownership of programs or workstreams.</li><li>
 Strong understanding of ISO 27001, SOC 2, NIST CSF; experience with CMMC readiness.</li><li>
Practical knowledge of privacy and GDPR with the ability to implement policy via procedures, controls, communications, and training.</li><li>
Proven expertise in risk management, compliance operations, policy/standards, vendor risk, resilience, security training/awareness, and audit readiness.</li><li>
Advanced data analysis skills with the ability to design and maintain KPI/KRI dashboards, translate data into insights, and present executive-ready reporting.</li><li>
Familiarity with security technologies across on-prem and cloud environments; strong problem-solving and systems thinking.</li><li>
Professional certifications (e.g., CISSP, CISM, CRISC) are advantageous.</li></ul><h1 class="jobSectionHeader"><b>
Soft Skills</b></h1><ul><li><b>
Compassionate </b><b>Candor</b>: Provide candid, actionable feedback to enhance team performance and individual growth.</li><li><b>
Seek</b><b> to Understand</b>: Embrace curiosity and a commitment to continuous learning, fostering an environment of collaboration and innovation.</li><li><b>
We Before Me</b>: Actively collaborate and engage diverse perspectives to ensure collective success.</li><li><b>
Do What You Say</b>: Take ownership of commitments, prioritizing and delivering on key initiatives.</li><li><b>
Light Up Learning</b>: Encourage bravery in trying new ideas, sharing failures as opportunities for growth and learning.</li><li><b>
Driven by Passion</b>: Connect personal passion to the mission, demonstrating resilience in the face of challenges while pursuing organizational goals.</li></ul><div></div><div><b><br>
Why Join Us?</b></div><ul><li>
Work in an established company that values innovation and growth.</li><li>
Engage with a collaborative team that is dedicated to making a meaningful impact in the energy sector.</li><li>
Gain exposure to cutting-edge projects and contribute to data-driven decision-making processes.</li></ul><div></div><p><b><br>
We do not sponsor employees for work authorization in the U.S. for this position.</b></p><br>
<p></p>
Award-Winning Benefits:
<p>
At Sargent &amp; Lundy, we care about the health and well-being of our employees. Our commitment extends beyond the workplace, offering comprehensive healthcare plans and generous paid time off to support our team members in every aspect of their lives. We understand the importance of work-life balance, which is why we are proud to provide competitive, award-winning benefits. Our dedication to employee satisfaction has earned us the prestigious Top Workplaces Culture Excellence Award for compensation and benefits in 2022, 2023, and 2024.</p><p></p><div><div><div><b><br>
Health &amp; Wellness</b></div><div><b> Financial Benefits</b></div><div><b> Work-Life Balance</b></div></div><br>
<div><ul><li>
Health Plans: Medical, Dental, Vision</li><li>
Life &amp; Accident Insurance</li><li>
Disability Coverage</li><li>
Employee Assistance Program (EAP)</li><li>
Back-Up Daycare</li><li>
FSA &amp; HSA</li></ul><ul><li>
401(k)</li><li>
Pre-Tax Commuter Account</li><li>
Merit Scholarship Program</li><li>
Employee Discount Program</li><li>
Corporate Charitable Giving Program</li><li>
Tuition Assistance</li><li>
First Professional Licensure Bonus</li><li>
Employee Referral Bonus</li></ul><ul><li>
Paid Annual Personal/Sick Time (PST)</li><li>
Paid Vacation</li><li>
Paid Holidays</li><li>
Paid Parental Leave</li><li>
Paid Bereavement Leave</li><li>
Flexible Work Arrangements</li></ul></div><br>
</div>
Compensation Range: $100,010.00 - $144,190.00 Transparency Statement: Sargent &amp; Lundy discloses compensation ranges that comply with all local and state regulations. The total compensation package for eligible positions will include a base salary or an hourly rate and a comprehensive benefits package, reflecting our commitment to rewarding performance and supporting the overall well-being of our employees. Individuals may also be eligible to participate in our yearly discretionary bonus. Awards &amp; Recognition:
<div></div>
Equal Opportunity:
<div>
Sargent &amp; Lundy is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability status, protected veteran status, or any protected status as defined by applicable law.</div></div>

Senior GRC Analyst

Artius Solutions

<div>Senior Identity &amp; Access Management Analyst
<p><b>Location:</b> Chicago, IL (Hybrid)<br>
<b>Employment Type:</b> Full-Time</p>
Overview
<p>A financial services organization based in Chicago, is seeking a <b>Senior Identity &amp; Access Management (IAM) Analyst</b> to support enterprise access governance and identity lifecycle management.</p>
<p>This role will focus on resolving complex access issues, supporting audit and compliance activities, and improving access governance processes across enterprise systems. The position requires strong experience in IAM platforms, identity lifecycle management, and collaboration with application owners to maintain secure and compliant access controls.</p>
<p>The ideal candidate combines strong technical IAM knowledge with a customer-focused mindset and the ability to troubleshoot complex identity and access challenges.</p>
Key Responsibilities Identity Lifecycle Management
<ul><li><p>Administer identity lifecycle processes including <b>user provisioning, role assignments, and de-provisioning</b>.</p>
</li><li><p>Ensure access requests and changes are completed accurately and in accordance with security policies.</p>
</li><li><p>Maintain identity governance controls across enterprise applications and systems.</p>
</li></ul>Access Governance &amp; Compliance
<ul><li><p>Conduct periodic access reviews to ensure access privileges remain appropriate.</p>
</li><li><p>Support audit and regulatory evidence requests related to identity and access management.</p>
</li><li><p>Evaluate access levels and identify potential security or compliance risks.</p>
</li></ul>IAM Platform Administration
<ul><li><p>Configure and maintain IAM tools and integrations across enterprise systems.</p>
</li><li><p>Work with application owners to gather and document entitlement and role requirements.</p>
</li><li><p>Support integration of IAM solutions with directories, enterprise applications, and infrastructure platforms.</p>
</li></ul>Troubleshooting &amp; Support
<ul><li><p>Investigate and resolve complex access issues impacting users and business processes.</p>
</li><li><p>Perform root cause analysis and implement corrective actions to prevent recurring issues.</p>
</li><li><p>Provide responsive support for IAM service requests and operational issues.</p>
</li></ul>Documentation &amp; Process Improvement
<ul><li><p>Develop and maintain documentation related to IAM policies, procedures, and operational workflows.</p>
</li><li><p>Identify opportunities to improve access governance processes and role definitions.</p>
</li><li><p>Contribute to process enhancements that improve IAM efficiency and compliance.</p>
</li></ul>Team Collaboration
<ul><li><p>Provide technical guidance to junior IAM team members.</p>
</li><li><p>Partner with application teams, infrastructure teams, and security teams to improve IAM integration and controls.</p>
</li><li><p>Facilitate discussions with stakeholders regarding role definitions, access governance, and identity management practices.</p>
</li></ul>Qualifications Education
<ul><li><p>Bachelor's degree in <b>Information Technology, Cybersecurity, Computer Science, or a related field</b>, or equivalent experience</p>
</li></ul>Experience
<ul><li><p><b>4 7 years of experience in Identity and Access Management or access governance</b></p>
</li><li><p>Experience administering IAM platforms within enterprise environments</p>
</li><li><p>Experience supporting <b>audit and compliance activities related to access management</b></p>
</li></ul>IAM &amp; Security Technologies
<p>Experience with IAM and IGA platforms such as:</p>
<ul><li><p><b>Microsoft Azure Active Directory</b></p>
</li><li><p><b>One Identity Manager</b></p>
</li><li><p><b>Saviynt or SailPoint</b></p>
</li><li><p>Other enterprise IAM or identity governance platforms</p>
</li></ul>Technical Skills
<ul><li><p>Strong understanding of <b>IAM principles, identity lifecycle management, and access governance</b></p>
</li><li><p>Experience working with <b>ServiceNow or similar ticketing platforms</b></p>
</li><li><p>Familiarity with enterprise directories and application access management</p>
</li></ul>Additional Skills
<ul><li><p>Strong analytical and problem-solving abilities</p>
</li><li><p>Excellent communication and collaboration skills</p>
</li><li><p>Ability to interact effectively with both technical teams and business stakeholders</p>
</li><li><p>Strong organizational skills with the ability to manage multiple priorities</p>
</li></ul><p>.</p></div>

Senior Identity Access Management

Explore 311+ Cyber security analyst ii in Chicago this March. Find roles across top companies and apply now to boost your career.